Privacy

Duta is taking accounts now. This page describes the personal data stored when you create one, and it will be kept current as the service opens.

Duta is operated from Malaysia and handles personal data under the Personal Data Protection Act 2010. This page describes what is actually stored rather than what a template would allow us to store.

If you become a customer

Account records: your name, email, company details and payment references held by our payment processor. We never see or store full card numbers.

Sending records: for each message, the sender, the recipient, the subject, timestamps and delivery events. Message metadata is kept for the log window on your plan, between 7 and 90 days, then deleted.

Message content: the body of every message you send is stored so you can see what was sent, and deleted with its metadata when your plan's log window ends.

Sandbox recipients: on the Free sandbox, the addresses you invite and whether they confirmed. An address that asks never to receive sandbox mail is kept on a block list so no account can invite it again.

Where it lives

Application data sits on Cloudflare infrastructure. Mail on paid plans is sent through Amazon SES in the Singapore region; Free sandbox mail is sent through Cloudflare Email Sending. Sub-processors are Cloudflare, Amazon Web Services and Stripe.

Once a week, account and billing records are copied to a private backup on Cloudflare R2, kept for 7 years so the business can recover from losing its database. The copy holds account details, domains, API key hashes, suppressions, billing and the audit log. It never holds message content, recipients of individual messages, request logs or webhook signing secrets.

Your data is not the product

We do not read customer message content, sell data, share it with advertisers or use it to train models. We access an account's records only when the account holder asks us to, or when investigating an abuse report or a security incident.

Deletion

Write to hello@duta.indra.sh and we will delete your account and its records within 30 days. Two things survive: suppression entries, which exist to protect recipients who asked not to be contacted, and records we are required by law to retain, such as tax invoices. Weekly backups taken before the deletion still hold your account record until they age out; they are read only to restore the service, and a deletion made since is applied again after any restore.

Changes

If this page changes in a way that affects you, account holders are emailed before it takes effect.